kritik
CVE-2014-1493
Mozilla: Miscellaneous memory safety hazards (rv:24.4) (MFSA 2014-15)
En geç 24 Eki 2026, 07:11 UTC tarihinden beri Trivy database'indeO derlemeden önce ne zaman girdiği kayıtlı değil.
Kaynağa göre önem derecesi
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat6.8AV:N/AC:M/Au:N/C:P/I:P/A:P
Trivy'nin kendi etiketi CRITICAL. Kritik diyenler: NVD, Red Hat. Daha düşük diyenler: Oracle (yüksek), Ubuntu (orta).
Açıklama
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Etkilenen paketler ve düzeltilmiş sürümler
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 7 | icedove, iceweasel | 24.4.0-1~deb7u1 ve 1 tane daha |
| Oracle Linux 5 | firefox, thunderbird | 24.4.0-1.0.1.el5_10 |
| Oracle Linux 6 | firefox, thunderbird | 24.4.0-1.0.1.el6_5 |
| ubuntu 12.04 | firefox, thunderbird | 28.0+build2-0ubuntu0.12.04.1 ve 1 tane daha |
| ubuntu 12.10 | firefox, thunderbird | 28.0+build2-0ubuntu0.12.10.1 ve 1 tane daha |
| ubuntu 13.10 | firefox, thunderbird | 28.0+build2-0ubuntu0.13.10.1 ve 1 tane daha |
6 kaynaktaki 12 kaydın hepsini göster
| Kaynak | Paket | Düzeltildiği sürüm |
|---|---|---|
| debian 7 | icedove | 24.4.0-1~deb7u1 |
| debian 7 | iceweasel | 24.4.0esr-1~deb7u2 |
| Oracle Linux 5 | firefox | 24.4.0-1.0.1.el5_10 |
| Oracle Linux 5 | thunderbird | 24.4.0-1.0.1.el5_10 |
| Oracle Linux 6 | firefox | 24.4.0-1.0.1.el6_5 |
| Oracle Linux 6 | thunderbird | 24.4.0-1.0.1.el6_5 |
| ubuntu 12.04 | firefox | 28.0+build2-0ubuntu0.12.04.1 |
| ubuntu 12.04 | thunderbird | 1:24.4.0+build1-0ubuntu0.12.04.1 |
| ubuntu 12.10 | firefox | 28.0+build2-0ubuntu0.12.10.1 |
| ubuntu 12.10 | thunderbird | 1:24.4.0+build1-0ubuntu0.12.10.1 |
| ubuntu 13.10 | firefox | 28.0+build2-0ubuntu0.13.10.1 |
| ubuntu 13.10 | thunderbird | 1:24.4.0+build1-0ubuntu0.13.10.2 |
Referanslar
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00016.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00017.html
- http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00022.html
- http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00016.html
- http://rhn.redhat.com/errata/RHSA-2014-0310.html
- http://rhn.redhat.com/errata/RHSA-2014-0316.html
- http://www.debian.org/security/2014/dsa-2881
- http://www.debian.org/security/2014/dsa-2911
27 referansın hepsi
- http://www.mozilla.org/security/announce/2014/mfsa2014-15.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.securityfocus.com/bid/66412
- http://www.ubuntu.com/usn/USN-2151-1
- https://access.redhat.com/security/cve/CVE-2014-1493
- https://bugzilla.mozilla.org/show_bug.cgi?id=896268
- https://bugzilla.mozilla.org/show_bug.cgi?id=958867
- https://bugzilla.mozilla.org/show_bug.cgi?id=960145
- https://bugzilla.mozilla.org/show_bug.cgi?id=963974
- https://bugzilla.mozilla.org/show_bug.cgi?id=965982
- https://bugzilla.mozilla.org/show_bug.cgi?id=967341
- https://bugzilla.mozilla.org/show_bug.cgi?id=977538
- https://linux.oracle.com/cve/CVE-2014-1493.html
- https://linux.oracle.com/errata/ELSA-2014-0316.html
- https://nvd.nist.gov/vuln/detail/CVE-2014-1493
- https://security.gentoo.org/glsa/201504-01
- https://ubuntu.com/security/notices/USN-2150-1
- https://ubuntu.com/security/notices/USN-2151-1
- https://www.cve.org/CVERecord?id=CVE-2014-1493